WO2013097494A1

WO2013097494A1 - Method and device for filtering uniform resource locator (url)

Info

Publication number: WO2013097494A1
Application number: PCT/CN2012/081548
Authority: WO
Inventors: 蒋武; 薛智慧; 李世光; 万时光
Original assignee: 华为数字技术（成都）有限公司
Priority date: 2011-12-31
Filing date: 2012-09-18
Publication date: 2013-07-04
Also published as: CN102624703B; CN102624703A; US9331981B2; US20140298445A1

Abstract

A method and device for filtering a uniform resource locator (URL). The method allows for: finding in a prestored category information table a first category corresponding to a URL connection request, clearing the first category URL connection request conforming to a predetermined URL access policy, forwarding to a corresponding server, determining a second category corresponding to the URL on the basis of a webpage content returned by the server, determining if the second category conforms to the predetermined URL access policy, and, if the second category conforms to the predetermined URL access policy, transmitting the webpage content to a client terminal; if otherwise, blocking the webpage content. The method and device disclosed for filtering the URL allow for real-time determination of the category to which the URL belongs, ensure that, in a scenario of non-timely category update, a URL connection request that has been cleared but should in fact be blocked is blocked in a timely manner, and implement the feature of accurate category filtration.

Description

Method and device for filtering uniform resource locator URL This application claims to be submitted to the Chinese Patent Office on December 31, 2011, the application number is 201110459686.7, and the Chinese patent entitled "Uniform Resource Locator URL Filtering Method, Device and Gateway" Application, and the priority of the Chinese Patent Application entitled "Uniform Resource Locator URL Filtering Method and Apparatus" filed on February 1, 2012 by the Chinese Patent Office, Application No. 201210022574.X, the entire contents of which are hereby incorporated by reference. Combined in this application. Technical field

The present invention relates to the field of data communications, and more particularly to a filtering method and apparatus for a uniform resource locator URL. Background technique

The URL (Uniform Resource Locator) filtering technology has been widely applied in the field of communication, and has become a mature technology in the field of application content security. The technology can filter out webpages of a set category according to the needs of the user, depending on the category of the webpage, for example, filtering out newspages.

When a security device with URL filtering detects a connection request, it obtains the category to which the URL belongs by remotely querying the classification server according to the URL requested by the connection request, and then caches it in the local storage. In the prior art, if the category to which a URL belongs is obtained, when the user accesses the URL again during the aging time of the cache, the filtering operation may be directly performed according to the category to which the cached URL belongs; After the time, the remote query needs to be performed again to obtain the category to which the URL belongs.

However, in actual situations, many webpages contain content that is dynamic, that is, the webpages that request access are different in different time periods, and the specific content and the category to which they belong may be different. The content of the webpage is found to be changed in time, or the classification server has been updated, but the category of the URL cached in the security device belongs to the aging time, so that the URL belongs to The categories cannot be updated in a timely manner. In this case, some should be filtered out.

The URL connection request is likely to be released, making the URL classification identification inaccurate, and thus the filtering function cannot be accurately implemented. Summary of the invention

In view of the above, the embodiments of the present invention provide a method and a device for filtering a uniform resource locator URL, so as to overcome the problem that the classification server may not be able to update the URL accurately due to the fact that the classification server may not be updated in time.

To achieve the above object, the present invention provides the following technical solutions:

A method for filtering a uniform resource locator URL, including:

Receiving a URL connection request initiated by the client;

Searching, from the webpage category corresponding to each URL in the pre-stored category information table, the first category corresponding to the URL carried in the URL connection request;

Determining whether the first category meets a preset URL pass policy, and the URL pass policy includes a webpage category that is allowed to pass;

If yes, send the URL connection request to a server corresponding thereto, and receive the content of the webpage returned by the server;

Determining, according to the content of the webpage, a second category corresponding to the URL, determining whether the second category meets the preset URL traffic policy; and if the second category meets the preset URL traffic policy, The webpage content is sent to the client; otherwise, the webpage content is blocked.

A filtering device for a uniform resource locator URL, comprising:

a request receiving module, configured to receive a URL connection request initiated by the client;

a first category obtaining module, configured to: find, from a webpage category corresponding to each URL in the pre-stored category information table, a first category corresponding to the URL carried in the URL connection request;

a pass-through judging module, configured to determine whether the first category meets a preset URL pass-through policy, where the URL pass-through policy includes a webpage category that is allowed to pass;

a request sending module, configured to: when the judgment result of the pass judgment module is YES, the URL The connection request is sent to the server corresponding thereto, and receives the content of the webpage returned by the server; the category determining module is configured to determine, according to the content of the webpage, a second category corresponding to the URL, and determine whether the second category meets the Pre-set URL traffic policy;

a content returning module, configured to send the webpage content to the client when the judgment result of the category judging module is yes;

And a blocking module, configured to block the content of the webpage when the determination result of the category determining module is negative.

The embodiment of the present invention discloses a URL filtering method and device, which can find a first category corresponding to a URL carried in a URL connection request from a pre-stored category information table, where the URL connection request conforms to a preset In the case of the URL pass policy, the URL connection request is forwarded to the corresponding server, and the second category corresponding to the URL is determined according to the webpage content returned by the server, and it is determined whether the second category conforms to the preset URL pass policy. And if the second category meets the preset URL pass policy, sending the webpage content to the client; otherwise, blocking the webpage content. The URL filtering method and device can determine the category to which the URL belongs in real time, and ensure that the URL connection request that is released, but should actually be blocked, is blocked in time when the content of the webpage changes or the category is not updated in time. Achieve accurate classification filtering. DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is an embodiment of the present invention, and those skilled in the art can obtain other drawings according to the provided drawings without any creative work.

FIG. 1 is a flowchart of a first URL filtering method according to an embodiment of the present invention;

2 is a flowchart of determining a second category of webpage content according to an embodiment of the present invention;

3a is a flowchart of a second URL filtering method according to an embodiment of the present invention;

FIG. 3b is a flowchart of a third filtering method of a URL according to an embodiment of the present invention;

4 is a schematic structural diagram of a URL filtering apparatus according to an embodiment of the present invention; FIG. 5 is a schematic structural diagram of a first category obtaining module according to an embodiment of the present invention; FIG. 6 is a schematic structural diagram of a category determining module according to an embodiment of the present invention;

FIG. 7 is a schematic structural diagram of a second URL filtering apparatus according to an embodiment of the present invention; FIG. 8 is a schematic structural diagram of a third URL filtering apparatus according to an embodiment of the present invention; . detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention. Embodiment 1

FIG. 1 is a flowchart of a first method for filtering a URL according to an embodiment of the present invention. As shown in FIG. 1 , the URL filtering method may include:

Step 101: Receive a URL connection request initiated by a client.

Step 102: Search, from a webpage category corresponding to each URL in the pre-stored category information table, a first category corresponding to the URL carried in the URL connection request;

Optionally, the pre-stored category information table may be locally cached or pre-stored on the remote classification server. Of course, the user may also store the category information corresponding to all existing URLs locally, and periodically update them. , to a certain extent, to meet the needs of URL connection request filtering work;

The pre-stored category information table can be in various forms, for example, the form of the record table can be used, or the form of the file can be used. Of course, the storage form is not limited to the above two types, as long as the URL can be indicated. The form of the correspondence of the web page categories can be used;

Of course, if the category information table in the locally cached category information table does not have the category information corresponding to the URL carried in the URL connection request, or the previously cached category information has passed the aging time, then Obtaining the pre-stored category information table cache from the remote classification server to the local, and then searching for the first category corresponding to the URL carried in the URL connection request according to the correspondence between the URL and the webpage category in the category information table;

Step 103: Determine whether the first category meets a preset URL pass policy, where the URL pass policy includes a webpage category that is allowed to pass, and if yes, proceed to step 104; the URL that is out does not conform to the URL pass policy; When the first category meets the preset URL pass policy, the process proceeds to step 104 to perform a corresponding step, and when the first category does not meet the preset URL pass policy, the URL connection request is blocked;

Step 104: Send the URL connection request to a server corresponding thereto, and receive the content of the webpage returned by the server;

When the URL to which the URL connection request is required to belong belongs to the traffic policy set by the user, the related device sends the URL connection request to the corresponding URL, and when the URL receives the connection request, the URL will The content of the webpage requested by the connection request is returned to the relevant step 105: determining the second category corresponding to the URL according to the content of the webpage; optionally, the specific method for determining the second category of the URL may be referred to FIG. 2, FIG. The method for determining the second category of the webpage content disclosed in the embodiment of the present invention, as shown in the figure, the step of determining the second category of the webpage content may include:

Step 201: Decoding the webpage content, and extracting the identification keyword of the webpage content; the identification keywords extracted here are, for example, a star, a microblog, a short message, etc., of course, some sensitive character segments, such as SARS. Type pneumonia, US president, etc.;

Step 202: Determine, according to the correspondence between the identification keyword and the webpage category stored in the local vocabulary list, the second category corresponding to the URL is a webpage category corresponding to the extracted identification keyword; Some keywords or sensitive characters can be classified as follows: The identification keywords corresponding to the entertainment category include: background, qq space, blessing SMS, funny SMS, etc.; the identification keywords corresponding to the news category include: military, financial, reporting, newspaper, etc. ; sports category pair Key words that should be identified include: streetball, basketball, football, nautical, aerobics, etc. If the data content extracted in step 301 includes the keyword "soccer", the webpage category of the URL corresponding to the data content may be identified as a sports class, and the executive body of the URL filtering method further specifies a sports class. The URL is not allowed to be accessed, and the content of the webpage including the data content is blocked;

Of course, the method for determining the second category of the URL according to the content of the webpage is not limited to the above process, for example, extracting the semantic relationship from the webpage content, matching the semantic relationship template in the pre-stored semantic library, and matching the semantic relationship template in the matching The corresponding webpage category is used as the second category, and the purpose of determining the second category according to the content of the webpage can also be achieved. No longer here - enumerating the specific way of determining the second category according to the content of the webpage, as long as it is a method capable of determining the second category of the URL according to the content of the webpage, it should belong to the scope of protection of the present invention;

Step 106: Determine whether the second category meets the preset URL pass policy, and if yes, go to step 107, if no, go to step 108;

Step 107: Send the webpage content to the client;

When the second category determined in step 106 belongs to a webpage category that is allowed to pass in the pass policy set by the user, the returned webpage content is returned to the client to provide normal services for the client; Step 108: Block the webpage Content

When the second category determined in step 106 does not belong to the webpage category allowed to pass in the pass policy set by the user, the second category is directly prohibited from being used, and the related webpage content is blocked. Broken.

In this embodiment, the method can search for the first category corresponding to the URL carried in the URL connection request from the pre-stored category information table, and release and forward the URL connection request of the first category according to the preset URL access policy. Go to the corresponding server, determine the second category corresponding to the URL according to the content of the webpage returned by the server, and determine whether the second category meets the preset URL pass policy, and if the second category meets the preset URL pass The policy is to send the webpage content to the client; otherwise, the webpage content is blocked. Through the URL filtering method disclosed by the present invention, it is possible to determine the classification of the URL in real time, and ensure that the content of the webpage changes frequently, or the classification update is not timely. Underneath, it is still able to block the URL connection request that should be blocked, but it should be blocked in time to achieve accurate classification and filtering, which improves the accuracy of URL filtering. Embodiment 2

FIG. 3 is a flowchart of a method for filtering a second URL according to an embodiment of the present invention. As shown in FIG. 3a, the URL filtering method may include:

Step 301: Receive a URL connection request initiated by a client.

Step 302: Search, from a webpage category corresponding to each URL in the pre-stored category information table, a first category corresponding to the URL carried in the URL connection request;

Step 303: Determine whether the first category meets the preset URL pass policy, and if yes, go to step 306, if no, go to step 304;

Step 304: Block the URL connection request, proceed to step 305;

Step 305: From the blocked URL connection request, filtering the URL connection request with the preset identifier, and proceeding to step 306;

Because in actual situations, the content of some web pages is dynamically changed, in order to avoid that the same URL does not meet the URL pass-through policy before a certain time, and the category actually belongs to a URL pass-through policy after a certain time, and The classification of the URL is not updated in time, so that the URL connection request that should be allowed to pass is blocked. The user may use the method described in this step, and the preset identifier may be a specific key. The word can also be a fixed connection address, or a username, etc.

Step 306: Send the URL connection request to a server corresponding thereto, and receive the content of the webpage returned by the server;

Step 307: Determine, according to the content of the webpage, a second category corresponding to the URL. Step 308: Determine whether the second category meets a preset URL traffic policy. If yes, go to step 309. If no, go to step 310. ;

Step 309: Send the content of the webpage to the client, and proceed to step 311;

Step 310: Block the content of the webpage; Step 311: Update the webpage category corresponding to the URL carried in the URL connection request in the pre-stored category information table to the second category.

Optionally, the process shown in FIG. 3a may also be adjusted as follows: the order of step 305 and step 304 is interchanged, that is, before blocking a URL connection request, it is determined whether the URL connection request carries a pre- Set the identifier, if the URL connection request is blocked, otherwise the URL connection request is allowed to pass, and the batch processing mode is adjusted to real-time processing. For details, please refer to FIG. 3b: Step 321 , receiving the client-initiated URL connection request;

Step 322: Find, from a webpage category corresponding to each URL in the pre-stored category information table, a first category corresponding to the URL carried in the URL connection request;

Step 323: Determine whether the first category meets the preset URL pass policy, and if yes, go to step 326, if no, go to step 324;

Step 324, determining whether the URL connection request carries a preset identifier, if it proceeds to step 326, otherwise, proceeds to step 325;

Step 325, blocking the URL connection request.

Step 326: Send the URL connection request to a server corresponding thereto, and receive the content of the webpage returned by the server;

Step 327: Determine, according to the content of the webpage, a second category corresponding to the URL. Step 328: Determine whether the second category meets a preset URL traffic policy. If yes, go to step 329. If no, go to step 330. ;

Step 329: Send the content of the webpage to the client, and proceed to step 331;

Step 330: Block the content of the webpage;

Step 331: Update the webpage category corresponding to the URL carried in the URL connection request in the pre-stored category information table to the second category. When the URL pass policy is used, it can be known that the first category of the relevant URL on the locally cached or remotely acquired classification server is inaccurate, and the first category corresponding to the locally cached URL can be updated to the second determined according to the content of the webpage. Category, or send a URL classification change request to the remote classification server, To enable the classification server to make relevant follow-up actions according to the URL classification change request.

In this embodiment, the URL filtering method is configured to determine, according to the pre-stored URL first category, whether the URL connection request initiated by the client conforms to a preset URL pass policy, and the URL connection request satisfies the preset URL filtering policy. The URL connection request is forwarded to the corresponding server, and the second category is determined according to the content of the webpage returned by the server, and it is determined whether the second category conforms to the preset URL traffic policy. If not, the device will be blocked. The content of the returned web page is broken, and it is possible to avoid some URL connection requests that should be released but are blocked due to untimely update of the classification. Through the URL filtering method disclosed by the present invention, it is possible to determine the classification to which the URL belongs in real time, and ensure that if the classification update is not timely, the URL connection request that is released, but should actually be blocked, can be blocked in time, and can also be Some are not released, but in fact, the URL connection request should be released in time to achieve accurate classification filtering. Embodiment 3

FIG. 4 is a schematic structural diagram of a URL filtering apparatus according to an embodiment of the present invention, as shown in FIG. 4. The URL filtering device 40 can include:

a request receiving module 401, configured to receive a URL connection request initiated by the client;

The first category obtaining module 402 is configured to: find, from a webpage category corresponding to each URL in the pre-stored category information table, a first category corresponding to the URL carried in the URL connection request; the first category obtaining module For the specific structure of the interface 402, refer to FIG. 5. As shown in the figure, the connection determining module 402 may specifically include:

The information table obtaining submodule 4021 is configured to obtain a pre-stored category information table cache from a remote classification server to the local device;

If the category information table of the URL corresponding to the URL connection request is locally cached, the category information table can be directly obtained from the local cache;

The first category determining sub-module 4022 is configured to search, according to the correspondence between the URL and the webpage category in the category information table, the first category corresponding to the URL carried in the URL connection request; the pass determining module 403 is configured to determine Whether the first category conforms to a preset URL pass policy The URL pass-through policy includes a webpage category that is allowed to pass;

The request sending module 404 is configured to send the URL connection request to a server corresponding to the server when the determination result of the pass determining module 403 is YES, and receive the content of the webpage returned by the server;

a class determining module 405, configured to determine, according to the content of the webpage, a second category corresponding to the URL, and determine whether the second category meets the preset URL traffic policy;

The specific structure of the category judging module 405 can be referred to as FIG. 6. As shown in the figure, the method may include: a webpage decoding sub-module 4051, configured to decode the webpage content, and extract the identification keyword of the webpage content;

The second category determining sub-module 4052 is configured to determine, according to the correspondence between the identification keyword and the webpage category stored in the local thesaurus list, the second category corresponding to the URL is the webpage category corresponding to the extracted identification keyword;

The class judging sub-module 4053 is configured to determine whether the second category identified by the second category determining sub-module 4052 conforms to the URL pass-through policy;

The content returning module 406 is configured to send the content of the webpage to the client when the determination result of the category determining module is YES;

The blocking module 407 is configured to block the content of the webpage when the judgment result of the category determining module is negative.

It should be noted that the URL filtering apparatus of the embodiment of the present invention is not limited to the foregoing one structure. For example, the first category obtaining module 402 and the pass determining module 403 may be an independent module integrated into one, and complete the URL connection request. The first category obtains and determines whether the first category meets a preset traffic policy; for example, the content return module 406 and the blocking module 407 may be one module.

In other embodiments, the URL filtering apparatus may further include a category updating module, configured to: when the category determining module 405 determines that the identifying category does not conform to the preset URL pass policy, the locally cached category information. The webpage category corresponding to the URL carried in the URL connection request in the table is updated to the second category. Further, referring to FIG. 7, in another embodiment, the blocking module 407 is further configured to: when the traffic judging module 403 determines that the first category does not comply with a preset URL pass policy, Breaking the URL connection request;

The URL filtering apparatus may further include an identifier filtering module 701, configured to filter, by the blocked URL connection request, a URL connection request with a preset identifier, and trigger the request sending module 404 to send the URL connection request to And corresponding to the server, and receiving the webpage content returned by the server; the category determining module 405 determines a second category corresponding to the URL according to the webpage content, and determines whether the second category meets the preset The URL passing policy; if the identifying category meets the preset URL pass policy, the content returning module 406 sends the webpage content to the client; otherwise, the blocking module 407 blocks the webpage content.

Further, referring to FIG. 8, in other embodiments, the URL filtering apparatus may further include an identifier determining module 702, configured to determine whether the URL connection request has a preset when the determining result of the pass determining module 403 is negative. Identifying; if the preset identifier is provided, triggering the request sending module 404 to send the URL connection request to the server corresponding thereto, and receiving the webpage content returned by the server; the category determining module 405 according to the webpage Content, determining a second category corresponding to the URL, determining whether the second category meets the preset URL pass policy; if the identification category meets the preset URL pass policy, the content return module 406 The webpage content is sent to the client; otherwise, the trigger blocking module 407 blocks the webpage content;

If the preset identifier is not provided, the trigger blocking module 407 blocks the URL connection request.

In this embodiment, the device can search for the first category corresponding to the URL connection request from the pre-stored category information table, and release the URL connection request of the first category according to the preset URL access policy, and forward the request to the corresponding server. And determining, according to the content of the webpage returned by the server, the second category corresponding to the URL, and determining whether the second category meets the preset URL traffic policy, and if the second category meets the preset URL traffic policy, The webpage content is sent to the client; otherwise, the webpage content is blocked. Through the URL filtering device disclosed by the present invention, the classification of the URL can be determined in real time, and if the classification update is not timely, the URL connection request that is released, but should actually be blocked, can be blocked in time to achieve accurate classification and filtering. The function. In addition, the embodiment of the present invention further discloses a gateway. As shown in FIG. 9, the gateway 90 includes the URL filtering apparatus 40 disclosed in the embodiment of the present invention, which can first receive a URL connection request initiated by a client; Determining whether the URL connection request conforms to a preset URL pass policy; if yes: sending the URL connection request to a server corresponding thereto, and receiving webpage content returned by the server; determining the content of the webpage a second category, determining whether the second category meets a preset URL pass policy; if yes: sending the returned webpage content to the client; if not: blocking the returned webpage content, the gateway can Real-time determination of the classification to which the URL belongs, to ensure that if the classification update is not timely, the URL connection request that is released, but should actually be blocked, is blocked in time to achieve accurate classification and filtering. The various embodiments in the present specification are described in a progressive manner, and each embodiment focuses on differences from other embodiments, and the same similar parts between the various embodiments may be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the description of the method part.

It should also be noted that, in this context, relational terms such as first and second, etc. are used merely to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply these entities or operations. There is any such actual relationship or order between them. Furthermore, the terms "including", "comprising" or "comprising" or "comprising" or "includes" or "includes" or "includes" Other elements, or elements that are inherent to such a process, method, item, or device. An element defined by the phrase "comprising a ..." does not exclude the presence of additional equivalent elements in a process, method, article, or device that comprises the element, without further limitation. The steps of a method or algorithm described in connection with the embodiments disclosed herein can be implemented directly in hardware, a software module executed by a processor, or a combination of both. Software modules can be placed in random memory Memory (RAM), memory, read only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other form known in the art In the storage medium.

The above description of the disclosed embodiments enables those skilled in the art to make or use the invention. Various modifications to these embodiments are obvious to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Therefore, the present invention is not intended to be limited to the embodiments shown herein, but the scope of the inventions

Claims

Rights request

A method for filtering a uniform resource locator URL, comprising: receiving a URL connection request initiated by a client;

The method according to claim 1, wherein the determining, according to the content of the webpage, the second category corresponding to the URL comprises:

Decoding the webpage content, extracting the identification keyword of the webpage content; determining, according to the correspondence between the identification keyword and the webpage category stored in the local thesaurus list, the second category corresponding to the URL is extracted Identify the page category corresponding to the keyword.

The method according to claim 1, wherein the first category corresponding to the URL carried in the URL connection request is found in the webpage category corresponding to each URL in the pre-stored category information table. , including:

Obtaining a pre-stored category information table cache from a remote classification server to the local;

And determining, according to the correspondence between the URL and the webpage category in the category information table, the first category corresponding to the URL carried in the URL connection request.

The method according to claim 1, wherein if the identification classification does not comply with the preset URL traffic policy, the method further includes:

a network corresponding to the URL carried in the URL connection request in the pre-stored category information table The page category is updated to the second category.

The method according to any one of claims 1-4, wherein if the first category does not comply with a preset URL pass policy, the method further includes:

Blocking the URL connection request;

From the blocked URL connection request, the URL connection request with the preset identifier is filtered, and the filtered URL connection request is sent to the corresponding server, and the webpage content returned by the server is received;

Determining, according to the returned webpage content, the second category corresponding to the URL, determining whether the second category meets the preset URL traffic policy; and if the identification category meets the preset URL traffic policy, the webpage is The content is sent to the client; otherwise, the content of the webpage is blocked.

The method according to any one of claims 1-4, wherein, if the first category does not comply with a preset URL pass policy, the method further includes:

Determining whether the URL connection request carries a preset identifier;

If the preset identifier is provided, the URL connection request is sent to the server corresponding thereto, and the webpage content returned by the server is received, and the second category corresponding to the URL is determined according to the webpage content, and the Whether the second category meets the preset URL pass policy; if the recognition category meets the preset URL pass policy, the webpage content is sent to the client; otherwise, the webpage content is blocked;

If the preset identifier is not provided, the URL connection request is blocked.

A filtering device for a uniform resource locator URL, comprising: a request receiving module, configured to receive a URL connection request initiated by a client;

a request sending module, configured to send the URL connection request to a server corresponding thereto when the judgment result of the pass judgment module is YES, and receive the webpage content returned by the server; a category determining module, configured to determine, according to the content of the webpage, a second category corresponding to the URL, and determine whether the second category meets the preset URL traffic policy;

The apparatus according to claim 7, wherein the category determining module comprises: a webpage decoding sub-module, configured to decode the webpage content, and extract an identification keyword of the webpage content;

a second category determining submodule, configured to determine, according to the correspondence between the identification keyword and the webpage category stored in the local thesaurus list, the second category corresponding to the URL is the webpage category corresponding to the extracted identification keyword;

The class judging sub-module is configured to determine whether the second category identified by the second category determining sub-module conforms to the URL pass-through policy.

9. The device according to claim 7, wherein the first category obtaining module comprises:

a information table obtaining submodule, configured to obtain a pre-stored category information table cache from a remote classification server to the local device;

The first category determining sub-module is configured to find a first category corresponding to the URL carried in the URL connection request according to the correspondence between the URL and the webpage category in the category information table.

The device according to claim 7, further comprising:

a classification update module, configured to: when the category determination module determines that the identification category does not meet the preset URL pass policy, the webpage corresponding to the URL carried in the URL connection request in the locally cached category information table Category, updated to the second category.

The device according to any one of claims 7 to 10, wherein the blocking module is further configured to:

The passage judging module judges that the first category does not conform to a preset URL pass policy In the case, blocking the URL connection request;

Also includes:

An identifier filtering module, configured to filter, by using a blocked URL connection request, a URL connection request with a preset identifier;

For each URL connection request obtained by the filtering, the request sending module sends the URL connection request to a server corresponding thereto, and receives the webpage content returned by the server;

Determining, by the category determining module, the second category corresponding to the URL according to the content of the returned webpage, and determining whether the second category meets the preset URL passing policy;

If the identification category meets the preset URL pass policy, the content return module sends the web page content to the client; otherwise, the blocking module blocks the webpage content.

The device according to any one of claims 7 to 10, further comprising: an identifier determining module, configured to determine whether the URL connection request is included when the judgment result of the pass judgment module is negative Presetting the identifier; if the preset identifier is provided, triggering the request sending module to send the URL connection request to the server corresponding thereto, and receiving the webpage content returned by the server; the category determining module according to the webpage Content, determining a second category corresponding to the URL, determining whether the second category meets the preset URL pass policy; if the recognition category meets the preset URL pass policy, the content return module will Sending the content of the webpage to the client; otherwise, triggering the blocking module to block the content of the webpage;

If the preset identifier is not provided, the trigger blocking module blocks the URL connection request.